Network And Security Planning; Overview; Security Checklists - Honeywell 900U02-0100 User And Installation Manual

3.1.

Overview

This document contains networking and security-related information applicable to ControlEdge HC900
process & safety controller. It provides information about the recommendations to assist you in planning,
setting up, and maintaining a secure environment for your system
Assumptions and prerequisites
This guide is primarily intended for engineers, system administrators, and other technical staff who are
responsible for planning the configuration and maintenance of a ControlEdge HC900 system. Therefore,
it is assumed that the user must have technical knowledge and familiarity with the following:

Microsoft Windows

Networking system and concepts

Security issues and concepts
! Attention
As you derive a security program for your process control system you must be aware that
detailed information, if not protected, can fall into the hands of organizations that could cause
harm to your control system or process operations.
3.2.

Security Checklists

This chapter provides a number of checklists to help you analyze the security issues that must be
considered for your site.
The checklists cover some of the main threats that may exist on a process control network and the steps
that can be used to mitigate against them.
Viruses and other malicious software agent
This threat encompasses malicious software agents such as viruses, spy ware (trojans), and worms.
The intrusion of malicious software agents can result in the following:

Performance degradation

Loss of system availability

The capture, modification, or deletion of data

Loss of prestige if the external access becomes public knowledge
Mitigation steps

Ensure that your virus protection and Microsoft security hot fixes are up to date on all nodes in
your process control network and the system connected to it.

Ensure that there are no e-mail clients on any nodes of your process control network.

Use a firewall for the business network to process control network interface.
40 ControlEdge HC900 Process & Safety Controller User and Installation Manual

3. Network and Security Planning

TM
operating system (7, 8 and 10)
Revision 10
May 2019